On October 2, the Consumer Financial Protection Bureau (CFPB or Bureau) published a final rule in the Federal Register, officially extending compliance dates for its 2023 small business lending data collection and reporting rule under the Equal Credit Opportunity Act (ECOA) and Regulation B, which implements Section 1071 of the Dodd-Frank Act. The final rule replaces an interim rule released in June 2025 that pushed back compliance deadlines. This extension was issued by the CFPB in response to ongoing litigation by both industry and consumer advocacy groups, as well as court orders, to create a uniform timeline for financial institutions to comply with data collection and reporting requirements for women-owned, minority-owned, and small businesses.
The Office of the Comptroller of the Currency (OCC) is proposing to amend its regulations to simplify licensing requirements for corporate activities and transactions involving national banks and federal savings associations that have less than $30 billion in total assets and satisfy certain conditions. The proposed rule is intended to reduce burden on these institutions.
On September 29, the California Department of Financial Protection and Innovation (DFPI) announced significant modifications to the proposed regulations under the Digital Financial Assets Law (DFAL) and the Money Transmission Act (MTA). These changes are part of an ongoing effort to refine the regulatory framework governing digital financial assets and ensure clarity in the application of these laws.
The Federal Deposit Insurance Corporation (FDIC) today issued its list of state nonmember banks recently evaluated for compliance with the Community Reinvestment Act (CRA). The list covers evaluation ratings that the FDIC assigned to institutions in July 2025.
In this month’s Regulatory Update, we cover three developments highlighting the FCC and FTC’s continued efforts to strengthen robocall prevention and telemarketing compliance. First, the FCC is seeking public comment on whether to revise or extend STIR/SHAKEN implementation deadlines for certain providers, and how to assess the framework’s effectiveness in combating illegal robocalls.